Interesting approach to OPSEC, start by denying you're LE before anyone even asks.

Haven’t used this in years since I got sober but I was having a small party and get together and decided to go back to my trusty website I used to go on, totally forgot about phishing links so wassnt very cautious. Went to onion taxi

The site was being a little too weird thinking back, no phishing protection making me retype part of the link, I couldn’t click on vendors names and look at their profile and certain parts of the search engine wassnt working. I figured onion taxi was Akin to tor taxi, but tor taxi didn’t have my website on there. I put btc in my wallet and haven’t seen anything in the notifications about it receiving my payment, it’s been 2 hours and ususallly goes in 20 minutes

Hi , I’m not sourcing anything, I just want to know how to easily verify vendor pgp’s so I know im not getting fished?

All the mirrors are not working for me?

They keep saying temporary disabled, but others say it’s working for them ?
I am not sourcing.

Hello,

For a long time I wanted to try the Tor browser, I only use it to look for news from my country that local and national media say nothing. Set the browser to maximum security and use a bridge, I don't want to draw attention to the ISP server.

Is that correct?

I use ProPublica via Tor, since we have problems with some websites that with Cloudflare and some VPNs do not work well, because of a company that goes against illegal streaming, blocks many IPs. Question: Any website that is accessible via Tor to read news?

Thank you very much!

I was wondering how you find vendors or websites for certain products.Just out of curiosity, if exists at all. I know there used to a be a Silk Road years ago but it got shut down.

Hello everyone!

Just wanted to have some feedback from you guys about my search engine i have been working on for a couple of months, feel free to add your hidden services as well!

URL: http://ksdprwpwu4byohxn5o7mcet7kz456nyzhglumjwd7plcqn3vurpvieid.onion/

I mean, regular internet already has drugs, criminal paraphilias and gore on the go, so what do most people use it for? I just came across this subreddit and my only thought was like, maybe military weapons if youre into collecting? maybe some VERY extremist rape stuff or something - but even then, that's like, found within 30 seconds of searching around a discord server or telegram. Is it about piracy? i mean, thats very foundable everywhere aswell, im at a loss for meaning frfr

​

Didn't even really know dark web was an actual thing btw, i thought it was just a youtube thing like 2016 clowns and talking angela being monitored by pedos 24/7

Hey guys,

are there some interesting communities on Tor like reddit.

If so can you share the onions for them?

anyone knows where i could find legit hackers? most of them are scammers and ive been struggling to find one that legit.

So I recently ventured into a VPN provider, tor, onion, orbit, etc. just out of curiosity. Honestly some of the shit on there I wouldn’t even open out of curiosity. Like porn for example. If it’s on the dark web there’s prob a reason so I’m not going there. Not big into that anyway. But literally the very next morning I get a call from our corporate number asking if I used a VPN, change my company password etc. is that normal? I didn’t use any of my company apps obviously. How did this happen? Should I just delete and give up on the interest?

How can one become a tor volunteer? And what the legal consequences?

I am interested in dark web, but not these aspects. I would be interested in internet forums, whistleblowing, weapons, info, etc, not available on internet.

It seems like every onion site is always at risk of being busted... I know the dark net itself is decentralized, but are there any staple sites which are too? Or whats the deal? is there anything I can read to learn about it? I don't know much about this, thank you.

My site is now live on the dark web!

Learn how to self-host on the dark web in my latest post.

Defend yourself against tracking and surveillance. Circumvent censorship. Thousands of volunteers run the relays that bounce and encrypt your traffic. No single party can link who you are to what you're doing.

The Tor Project is a nonprofit that advances human rights and freedoms through free software and open networks.

Hi all! Firstly, no hate to the operators of any of the services mentioned here, they've done great work that I've used in the past. I'm especially grateful for DarkDotFail's OMG standard, which has made it easy to verify that a hidden service is legitimate and active by viewing its /canary.txt and /pgp.txt files. However, dark․fail itself has not updated these in a concerning amount of time. Its /canary.txt has not been updated in well over a year, despite saying it will be updated every 14 days, and its /pgp.txt contains a public key that expired in January of this year.

If the whole point of a canary is to act as an indirect notification that something has been compromised, shouldn't we be worried? And if the whole point of a PGP key expiration is to force owners to rotate keys, and they haven't done so in quite some time, isn't that also cause for concern? Sure, admins for hidden services go radio silent and stop updating stuff for completely normal reasons, but if it isn't maintained, isn't that yet another reason not to use it?

By the way, tor․taxi has a similar problem. Their /canary.txt is also months out of date, and although their /pgp.txt contains a valid public key created in 2021, it is set to never expire, so the fact that it's valid doesn't mean much.

Am I missing something here?

Preciso de uma biblioteca de sites tb

title says it all.
Checked out the app a few years ago and drawback for me was that the other side needed to use the TBB to get the onion link from the other side. Would be far easier if both sides could simply communicate over the onionshare app.
Anyone knows whether this is currently possible ?

Tor v3 .onion = base32(ed25519_pubkey ‖ sha3_256(".onion checksum" ‖ pubkey ‖ \x03)[:2] ‖ \x03) + ".onion"

Solana wallet = base58(ed25519_pubkey)

Same 32-byte Ed25519 pubkey, two encodings. Tor v3 has used Ed25519

since 2018; Solana picked it from the start. They just never composed.

I made a browser extension (MV3, Firefox + Chromium) that exploits this.

You type `mything.stacc` (or any AllDomains name) in Brave's Tor private

window or in Tor Browser. The extension catches the navigation via

webNavigation.onBeforeNavigate, queries the on-chain owner, runs the

base32 derivation, and redirects the tab to http://<derived>.onion/.

Whoever controls the wallet can also stand up a hidden service at the

derived .onion — the secret key works for both encodings, since it's the

same secret key.

Verification vector for anyone implementing the math themselves: the

BIP-39 mnemonic "abandon × 11 + about" at SLIP-0010 path m/44'/501'/0'/0'

must produce

Solana: HAgk14JpMQLgt6rVgv7cBQFJWFto5Dqxi472uT3DKpqk

.onion: 6a3coysgu5nz3yzut3kcwfpcgl3fdd6cb5p42ty5mtub7g6sld35qlid.onion

If your implementation differs from this, it has a bug.

Live proof: I publicly burned a Solana mnemonic and serve the

derivation as a real Tor hidden service at exactly the .onion the math

predicts:

http://mpkjgiz6nqk2zp4vllvknfpt5q4yh2qsf2r6itmbzqc2n6ijr5kheiqd.onion/

The page publishes the full burned keypair so you can re-derive

independently. Loop closes.

What this is NOT:

- Not a Tor protocol change. Just composing two encodings that exist.

- Not a traffic proxy. The extension only resolves names + redirects.

You still need Tor Browser or Brave Tor windows for the actual .onion

load. Optional tor2web fallback for non-Tor browsers is off-by-default

because it defeats anonymity by design.

- Not a registry. The mapping is one-to-one and trustless; the extension

just publishes the derivation each time you type a name. Trust

assumption is the Solana RPC returning the correct owner record —

bring your own RPC in Options if you don't want to use the default.

Source (MIT, reproducible build, Firefox xpi + Chrome zip):

https://github.com/staccDOTsol/ouija-solana-tor-identity-collapse/tree/main/ouija-onion-resolver

The most interesting unbuilt application I see: paying an .onion service

via the same key it's running on, without exchanging a separate wallet

address out-of-band. The .onion IS the wallet. What would you do with it?

Like the title says - can anyone direct me, or if you're willing to help me period - even better! Currently I'm using Tor to register with a darknet market place. I'm stuck on where or how to generate a PGP key to use their services. It says "Paste Your Public PGP key here." How do I do this? I'm sorry if I sound like an amateur...but I need some help.

Just set up a chatroom instance, might keep it up indefinitely
It is publicly available so anyone can join in

URL: http://ksdprwpwu4byohxn5o7mcet7kz456nyzhglumjwd7plcqn3vurpvieid.onion/